RE: nat problem [7:55537]

2002-10-14 Thread Richard Botham

Hi,
Looking at this, there appears to be no dynamic routing happening. The
gateway of last resort is on a different network than E0/0 and E0/1.
Can you actually reach 10.1.255.254 by any other means ?

Regards
Richard



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=55542t=55537
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: nat problem [7:55537]

2002-10-14 Thread Robert Edmonds

Two comments I would like to make.
1.  Richard, the gateway of last resort IS on the same network as E0/0.  The
subnet mask is 255.255.0.0.
2.  The route you added tells the router that 1.1.1.1 is out interface E0/0.
It's on E0/1.  So that definitely won't work.
If you remove the NAT statements, are you able to ping everything on both
sides?  If not, then you have a routing issue.  If so, then it is something
else.  Is there something missing from this config, like access-lists, etc.
that may be causing the problems?
If you are just wanting to NAT the one IP address, the first ip NAT line and
the associated access-list are unnecessary.  Try removing them from the
config and see what happens.

bbfaye  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 hi eb,
 I met a problem here:
 a Cicsco 2611#:

 Router#show running-config
 Building configuration...

 Current configuration:
 !
 version 12.0
 service timestamps debug uptime
 service timestamps log uptime
 service password-encryption
 !
 hostname Router
 !
 !
 ip subnet-zero
 !
 interface Ethernet0/0
 ip address 10.1.2.3 255.255.0.0
 no ip directed-broadcast
 ip nat outside
 !
 interface Ethernet0/1
 ip address 192.168.1.254 255.255.255.0
 no ip directed-broadcast
 ip nat inside
 !
 ip nat inside source list 10 interface Ethernet0/0 overload
 ip nat inside source static 192.168.1.1 1.1.1.1
 ip classless
 ip route 0.0.0.0 0.0.0.0 10.1.255.254
 no ip http server
 !
 access-list 10 permit 192.168.1.0 0.0.0.255
 !
 line con 0
 transport input none
 line aux 0
 line vty 0 4
 login
 !
 end

 Router#

 -
 the server 1.1.1.1 can be connected fine from the outside  network,
 but if a host 192.168.1.5 from inside network want to ping 1.1.1.1,
 it fail with timeout.

 I thought it was the problem that nat creation address was not learn by
the
 router so I add : ip route 1.1.1.1 255.255.255.255 e0/0.it still not work.

 why.?how can I fix it?
 !




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=1t=55537
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: nat problem [7:55537]

2002-10-14 Thread bbfaye

sorry Robert,I did add the route of 1.1.1.1 on interface e0/1

at 14 Oct 2002 14:08:08 - , [EMAIL PROTECTED] (Robert
Edmonds) wrote:
--

Two comments I would like to make.
1.  Richard, the gateway of last resort IS on the same network as E0/0.  The
subnet mask is 255.255.0.0.
2.  The route you added tells the router that 1.1.1.1 is out interface E0/0.

about the e0/0 ,it's my written mistake.

It's on E0/1.  So that definitely won't work.
If you remove the NAT statements, are you able to ping everything on both
sides?  If not, then you have a routing issue.  If so, then it is something
else.  Is there something missing from this config, like access-lists, etc.
that may be causing the problems?
If you are just wanting to NAT the one IP address, the first ip NAT line and
the associated access-list are unnecessary.  Try removing them from the
config and see what happens.

bbfaye  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 hi eb,
 I met a problem here:
 a Cicsco 2611#:

 Router#show running-config
 Building configuration...

 Current configuration:
 !
 version 12.0
 service timestamps debug uptime
 service timestamps log uptime
 service password-encryption
 !
 hostname Router
 !
 !
 ip subnet-zero
 !
 interface Ethernet0/0
 ip address 10.1.2.3 255.255.0.0
 no ip directed-broadcast
 ip nat outside
 !
 interface Ethernet0/1
 ip address 192.168.1.254 255.255.255.0
 no ip directed-broadcast
 ip nat inside
 !
 ip nat inside source list 10 interface Ethernet0/0 overload
 ip nat inside source static 192.168.1.1 1.1.1.1
 ip classless
 ip route 0.0.0.0 0.0.0.0 10.1.255.254
 no ip http server
 !
 access-list 10 permit 192.168.1.0 0.0.0.255
 !
 line con 0
 transport input none
 line aux 0
 line vty 0 4
 login
 !
 end

 Router#

 -
 the server 1.1.1.1 can be connected fine from the outside  network,
 but if a host 192.168.1.5 from inside network want to ping 1.1.1.1,
 it fail with timeout.

 I thought it was the problem that nat creation address was not learn by
the
 router so I add : ip route 1.1.1.1 255.255.255.255 e0/0.it still not work.

 why.?how can I fix it?
 !




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8t=55537
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: nat problem [7:55537]

2002-10-14 Thread Robert Edmonds

Richard,
Can't be.  We geeks don't do that.  And if we do, we never admit it.

Richard Botham  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Robert,
 Apologies - comes from reading too quickly :)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=55565t=55537
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: nat problem [7:55537]

2002-10-14 Thread Richard Botham

Robert,
Apologies - comes from reading too quickly :)


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=55564t=55537
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]